popfreeka.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:35:94:ba:cd:77:3f:d9:6d:f1:bb:42:f7:d3:bb:18:37:a7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=popfreeka.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:94:ba:cd:77:3f:d9:6d:f1:bb:42:f7:d3:bb:18:37:a7Serial Number (int): 279569518920024214030067822589876878456743
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:b3:a5:43:37:b4:d2:bc:d1:52:b3:14:4c:69:0f:3d:c1:c4:1a:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b9:92:52:6c:5e:12:46:5f:f3:a8:5a:25:aa:58:23:00:74:46:9a:09
Fingerprint (sha256): ee:16:77:59:f4:af:91:37:06:8e:9c:62:7c:3d:24:92:2e:2d:6f:af:02:ae:cf:2c:62:cd:29:b8:34:96:f9:75
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate popfreeka.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for popfreeka.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
popfreeka.com
www.popfreeka.com
www.popfreeka.com
Other certificates including the domain name popfreeka.com
(limited to 100 certificates)
popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
popfreeka.com
sni.cloudflaressl.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
adyl.popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
adyl.popfreeka.com
adyl.popfreeka.com
adyl.popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
adyl.popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
popfreeka.com
sni.cloudflaressl.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
adyl.popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
popfreeka.com
adyl.popfreeka.com
adyl.popfreeka.com
adyl.popfreeka.com
sni.cloudflaressl.com
popfreeka.com
adyl.popfreeka.com
popfreeka.com
adyl.popfreeka.com
Certificate
The complete raw certificate details for popfreeka.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISAzWUus13P9lt8btC99O7GDenMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMjAxMjEwMzhaFw0x OTAxMTgxMjEwMzhaMBgxFjAUBgNVBAMTDXBvcGZyZWVrYS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bnGtoJqHbUQ1iFpFACWL0A3zaVqHwrSm 8sh/opp1CPo0oyn+96ISjN66eYxrQNbjmYc/Y9vpb4FshsLJI7Hpim5gVeJPtB4t lfQIh21IWfe51rL4GQanm8jYd7IKLi7BwJAZDX1CyiAEzdwcDDteMCYIE4ciqOiX JDIXSGCi8ZHNpqeVarCispPbzvPCaqtLs2BUDzukdWYDt3NZzteuA5Nxgk/kgr01 8G8haAAwxkgaRjjDaPLxSjA1iX2h64YII5QeJQ7TjBqUI4VQDSOf5R3vq2y2akqD cSm8IOIBldsFEN4i+qXBN+LQ2shkDly5vn3VeXYVhSZOIyAJx9pTAgMBAAGjggMp MIIDJTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBqzpUM3tNK80VKzFExpDz3BxBoR MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wKwYDVR0RBCQwIoINcG9wZnJlZWthLmNvbYIRd3d3LnBvcGZyZWVrYS5jb20w gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5 IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0 Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AG9Tdqwx 8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZpGZW50AAAQDAEcwRQIgGUdx qz/zE4ajifDNOFAwuf8UWhEZyYgTyY4KA3YV/XQCIQCZQtBDzIod4GCKuKSpABya 3zX/9x1PzCwv0eCDTXeQIwB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABZpGZXXkAAAQDAEgwRgIhAIMRxRCObvBo1FXXts3dSxGm0RNBJrfQmF8M vO2P3Ik2AiEA9xe/2sBAm/vcxy3p1KcK+3AvwVAO9TCARCzH1yqhLMgwDQYJKoZI hvcNAQELBQADggEBAIQWiEgU9A6VZ9kA68N8bM9BMMa21NInjik94ewx4+CZ3JG8 Cfkw/2aUKcKNh3yibBPRJfHAQJz0E9iyioUTLPO1eetpSEBg4Aabl5zFxAChkWBi 9IhnyF/DzkqNwM5en6TJ/Shz/+mgqHP049QAM90Rd7tJkp/foawixcP8/QfBMY0S WFHIk88v/b1EAuUCowByHUI/YDaeSfG09guds5AdAMlLzmfYDKFZ1igyKf44wUQ4 GPLmaoJbcC5f69LDN2U/K7X8waT+44gFWoKG2otoQDvwb8P/jjLUqOj9gU7Nj7NG yeNozLS6mrb6CjJlATWRK6aUymGJTO2aBKU10NQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm5xraCah21ENYhaRQAl i9AN82lah8K0pvLIf6KadQj6NKMp/veiEozeunmMa0DW45mHP2Pb6W+BbIbCySOx 6YpuYFXiT7QeLZX0CIdtSFn3uday+BkGp5vI2HeyCi4uwcCQGQ19QsogBM3cHAw7 XjAmCBOHIqjolyQyF0hgovGRzaanlWqworKT287zwmqrS7NgVA87pHVmA7dzWc7X rgOTcYJP5IK9NfBvIWgAMMZIGkY4w2jy8UowNYl9oeuGCCOUHiUO04walCOFUA0j n+Ud76tstmpKg3EpvCDiAZXbBRDeIvqlwTfi0NrIZA5cub591Xl2FYUmTiMgCcfa UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279569518920024214030067822589876878456743 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 12:10:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 12:10:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'popfreeka.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23029833497461991555801795091910990006974615403959654514797793647193448742384892494160040306317560526296064543442071647917486985130351184067928613766374102209122653222333202581288755203762851601357354047601929305518089942101537702614785525582533626419631183602510069925626144056380098397259903749585277268863119904401242932449287745919240969839434101003337630957453820804043728819548485464300174624840159108767787143407159169144321948187251896753078089944511250878460501937029348807042653748997174420134938409238402964762617281887169593026093671972117396827070197523006314643652053981816364698753467139962955423537747 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ab3a54337b4d2bcd152b3144c690f3dc1c41a11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popfreeka.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popfreeka.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016691995b9d00000403004730450220194771ab3ff31386a389f0cd385030b9ff145a1119c98813c98e0a037615fd740221009942d043cc8a1de0608ab8a4a9001c9adf35fff71d4fcc2c2fd1e0834d779023007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016691995d7900000403004830460221008311c5108e6ef068d455d7b6cddd4b11a6d1134126b7d0985f0cbced8fdc8936022100f717bfdac0409bfbdcc72de9d4a70afb702fc1500ef53080442cc7d72aa12cc8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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